Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/df1a2e-2901-4f27-a2f1-2c18010fbfbf/1/J0fBcXhuiDFn2GK-EB81ITW5I7Q.mft
File: J0fBcXhuiDFn2GK-EB81ITW5I7Q.mft (raw, json)
Hash identifier: clVeggOZYSmdsQ/tbD8hn3FBYZNJmP9FZNUCsctlRhs=
Subject key identifier: 1C:36:DD:ED:BB:5E:7D:B1:D7:46:F9:32:A4:9E:ED:C5:35:A0:B8:E8
Authority key identifier: 27:47:C1:71:78:6E:88:31:67:D8:62:BE:10:1F:35:21:35:B9:23:B4
Certificate issuer: /CN=2747c171786e883167d862be101f352135b923b4
Certificate serial: 019DDDD69277E4216CE29E3E15E20E559B3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J0fBcXhuiDFn2GK-EB81ITW5I7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/df1a2e-2901-4f27-a2f1-2c18010fbfbf/1/J0fBcXhuiDFn2GK-EB81ITW5I7Q.mft
Manifest number: 38
Signing time: Thu 30 Apr 2026 10:02:00 +0000
Manifest this update: Thu 30 Apr 2026 10:02:00 +0000
Manifest next update: Fri 01 May 2026 10:02:00 +0000
Files and hashes: 1: J0fBcXhuiDFn2GK-EB81ITW5I7Q.crl (hash: EGEEQuoW6M3PeaJje7GBBei9ya1elGVv9FWxR2nISPU=)
2: Jhd8dVo4qeXLNKgQxWEaEIThO1U.roa (hash: Kzdyj7wpQhhcqBAlT0S5dvR8EKgyhHXnHpsN0XUZRx4=)
3: hFukJ1Me328-WPvDybOfx7SqLNM.asa (hash: HFJhYuc006ijF+saTkFV1K0a6wbtr7JpRGOKmayJt1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/df1a2e-2901-4f27-a2f1-2c18010fbfbf/1/J0fBcXhuiDFn2GK-EB81ITW5I7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/df1a2e-2901-4f27-a2f1-2c18010fbfbf/1/J0fBcXhuiDFn2GK-EB81ITW5I7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/J0fBcXhuiDFn2GK-EB81ITW5I7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dd:d6:92:77:e4:21:6c:e2:9e:3e:15:e2:0e:55:9b:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2747c171786e883167d862be101f352135b923b4
Validity
Not Before: Apr 30 10:02:00 2026 GMT
Not After : May 1 10:02:00 2026 GMT
Subject: CN=1c36ddedbb5e7db1d746f932a49eedc535a0b8e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d0:95:29:09:4c:96:da:82:c7:2e:49:70:e3:
7f:dd:a3:de:af:2b:57:d2:f5:81:98:c7:33:a2:4e:
f3:c9:cf:79:96:15:08:c9:58:cf:ae:14:14:09:c7:
b8:11:e4:73:e4:07:56:57:cc:0a:e6:6f:d0:11:d9:
44:f4:c7:da:55:07:5a:7f:dd:fa:02:42:f7:42:cd:
64:bb:43:be:bb:9e:1f:3e:08:76:ca:f2:57:34:61:
4b:26:87:5f:4d:f9:a8:fd:f0:60:0d:1e:17:8f:08:
58:43:fb:be:7f:4e:7f:73:d0:b2:5b:c0:41:ab:fa:
69:fb:1b:20:2f:87:d8:45:23:e1:29:46:6c:97:29:
c2:f5:18:2a:82:3b:43:be:b5:cd:73:d3:78:b1:f4:
55:48:c5:63:50:6f:45:30:40:d0:a2:32:16:11:66:
3b:e4:6d:10:f3:74:85:e4:f7:d0:df:b9:f5:fd:91:
04:48:73:c0:41:bf:57:94:b9:06:8f:cf:54:3c:6d:
bd:72:a5:54:b5:85:45:8f:c7:6a:0f:58:d9:b7:83:
27:7f:21:b6:a0:78:89:99:ea:4f:6c:a6:88:5d:dd:
8e:66:b8:46:9f:e4:ea:0c:cd:26:a9:a2:72:fe:78:
06:12:d3:3e:aa:15:f1:4a:60:8d:10:d8:8c:c3:89:
fd:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:36:DD:ED:BB:5E:7D:B1:D7:46:F9:32:A4:9E:ED:C5:35:A0:B8:E8
X509v3 Authority Key Identifier:
keyid:27:47:C1:71:78:6E:88:31:67:D8:62:BE:10:1F:35:21:35:B9:23:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J0fBcXhuiDFn2GK-EB81ITW5I7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/df1a2e-2901-4f27-a2f1-2c18010fbfbf/1/J0fBcXhuiDFn2GK-EB81ITW5I7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/df1a2e-2901-4f27-a2f1-2c18010fbfbf/1/J0fBcXhuiDFn2GK-EB81ITW5I7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:27:76:34:6b:b4:0d:72:11:d7:7b:02:e5:35:c5:50:da:81:
ce:5a:bd:9d:20:a9:2d:c3:2b:38:86:53:ba:55:b7:27:4b:99:
de:59:9b:e5:02:2e:62:60:78:f7:49:5f:14:07:1f:2f:ca:2f:
39:c9:29:8a:a9:8d:45:84:71:ac:e3:4b:43:35:2f:0a:d0:fb:
d5:51:34:46:75:68:52:a1:ab:bf:e5:c2:06:02:1b:93:59:b1:
0b:21:8a:e3:27:d9:52:cb:9a:be:ff:fe:ff:90:9f:73:a9:65:
1e:4a:6b:07:04:6d:1d:ae:66:5c:a7:c2:27:fd:62:39:79:a4:
09:4c:32:dc:ee:7e:d1:42:c5:79:e0:ae:98:ab:8a:39:1c:0a:
69:29:a4:47:c3:cc:90:32:d1:94:8e:04:d4:4e:fb:bf:81:7c:
ae:93:f0:f3:5e:52:ed:e1:0f:7e:cf:d1:79:04:77:42:e7:09:
79:8f:21:37:15:86:35:fa:16:bb:fb:bc:6d:78:f1:35:49:18:
76:5f:53:f4:8d:9d:23:a0:9d:f9:23:af:65:89:60:c3:58:60:
f0:5c:db:26:dc:a2:1e:02:aa:5b:bf:40:94:e7:f2:9b:2f:f7:
af:0c:5a:5d:3a:ef:c7:3e:0b:33:bd:da:30:d9:70:f9:e1:51:
93:39:51:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 12:39:45 2026 by rpki-client